Ahold Delhaize says a cyberattack disrupted services in Europe and the US
October 12, 2026 (October 12 to 22, 2026)
The parent company of Food Lion, Stop & Shop and Hannaford said in mid-October it was dealing with a cybersecurity issue and took some systems offline, including brand websites and apps, while stores stayed open. On October 19 it said the investigation had confirmed the incident was caused by the malicious actions of others, that it had filed a police report with the Dutch police, and that it had found no evidence that any sensitive customer, associate or partner data was taken. The investigation continues. Its European brands Albert Heijn, Etos and Gall & Gall and its Belgian e-commerce were back online, and the US banners' websites and apps returned on October 20 after at least eight days. Unfulfilled online orders were refunded. Public reporting still names no attacker and does not say whether systems were encrypted. Ahold Delhaize said early on that it saw no reason to link the incident to the French refrigeration attacks. It is the second major attack on the group since a November 2024 breach that exposed data on about 2.2 million people. On November 2 its Delhaize brand, whose stores in Belgium and Luxembourg were among those hit by a new wave of refrigeration failures, said it is investigating whether that incident is linked to the October attack.
Why it matters
Retail groups depend on shared back-end systems, so a precautionary shutdown can disrupt many brands at once.
What defenders can take from it
- Practice running the business with e-commerce and shared systems offline, and decide in advance who can order a shutdown.
Sources
- Fox Business: Food Lion, Stop & Shop and Hannaford websites face outages
- BleepingComputer: Ahold Delhaize cyberattack affects services across US and Europe
- Grocery Dive: Ahold Delhaize says there's no evidence the incident compromised personal data
- Insurance Journal: Ahold Delhaize update on the cybersecurity incident
- DutchNews: hackers tamper with fridges at 17 Dutch firms as attacks spread